Bridge Incident Registry
Support
Menu
Bridge entity

Multichain

Multichain was a cross-chain router and bridge protocol formerly known as Anyswap. It is included because of the July 2023 abnormal MPC-controlled asset outflows of more than $125 million and the subsequent announcement that operations would cease.

deadreviewedcurrent

Bridge facts

Canonical name
Multichain
Type
Cross Chain Router
Status
Dead
Confidence
High
Primary chains
Ethereum, Fantom, BNB Chain, Polygon, Avalanche, Arbitrum
Primary assets
WETH, WBTC, USDC, USDT
Operator
Multichain
Ecosystem
Multichain
Launch date
Unknown
End date
2023-07-14
Terminal reason
Operations ceased after loss of operational access and funding, following abnormal asset movements and the detention of key personnel described by the team.
Last reviewed
2026-08-26
Last verified
2026-08-26

Incident cases

  • Multichain 2023 abnormal MPC asset outflows2023-07-06

    In July 2023, more than $125 million in assets moved out of Multichain-controlled bridge contracts to unknown addresses. The protocol then stopped services and later announced that operations would cease after losing access to key operational systems and funds.

    Abnormal TransfersMore than $125 million in abnormal outflowsUnresolved

  • Multichain 2022 router approval vulnerability2022-01-18

    In January 2022, attackers exploited vulnerable Multichain/Anyswap router approval paths after a critical vulnerability disclosure. Independent technical reports document the flawed permit/underlying-token validation boundary and subsequent whitehat rescue activity.

    ExploitStolen, rescued, at-risk and later reimbursed amounts are distinct; this bounded record does not collapse them into a single USD loss.Unresolved

  • Anyswap / Multichain Router V3 2021 MPC key exploit2021-07-10

    Anyswap disclosed exploitation of prototype V3 cross-chain liquidity pools after repeated ECDSA R values exposed an MPC private key. Four malicious transactions across Ethereum, BNB Smart Chain and Fantom stole 2,398,496.02 USDC and 5,509,222.73 MIM. The operator stated that its V1/V2 bridge was not affected.

    Exploit2,398,496.02 USDC and 5,509,222.73 MIM reported stolen; no USD aggregate is asserted here.Unresolved

Evidence records

Official URL status

Official URL recorded as unknown: https://multichain.org/
Independent incident archive

Help maintain bridge history

Support incident linkage, lifecycle updates, evidence preservation, broken-link replacement, and corrections.

Support BIR
Record maintenance

Report a correction

Report missing evidence, incorrect dates, outcome changes, recovery details, reimbursement status, or broken links. GitHub Issues are preferred for structured review; the Google Form is available if you do not use GitHub.

Open GitHub Issues →Use Google Form →